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About This Guide 


IMPORTANT: The Virtual Office product and associated patches are not included in OES SP2. 


To use this guide, you must install OES using SP1 software (available for download from the Novell 
Support Web site (http://support.novell.com/tools/csp/csp_oes.html)). Otherwise, you will not be 
able to complete the exercises in this guide. 


Most organizations test new products in a lab setting prior to making them available for general use. 


This guide is designed to help you set up Novell® Open Enterprise Server (OES) in a lab 
environment using a specific and simplified configuration. The configuration is limited in scope and 
is meant only to acquaint you with OES and provide exposure to the Novell products it contains. 


Guide Purposes 
The instructions in this guide will help you do the following: 
+ Install an OES NetWare? server into an eDirectory™ tree named EXAMPLE TREE 


If you are installing the OES NetWare server first, you will create the tree during the 
installation process. If you already installed OES for Linux, you will install this server into the 
tree you created during that installation. 


+ Install select OES components on the server 


+ Perform simple tasks to get acquainted with basic OES services 


About Information Flow in This Guide 


The sections in this guide are designed to be accessed sequentially, and they guide you through the 
following main tasks: 

1. Installing an OES NetWare server. 

2. Setting up the eDirectory infrastructure—user objects, group objects, passwords, etc. 


3. Reviewing the services featured in the guide and performing all additional setup tasks required 
for test driving and exploring the features. 


4. Test driving and exploring the features. 


Using This Guide as a Reference 


If you want to install additional OES servers or create a different tree structure than the one specified 
in this guide, you can still use these instructions as a basic guide for setting up OES services in a lab 
environment. However, you will probably also want to refer to the information found in the 
following guides: 


+ Novell OES SP2 Planning and Implementation Guide 
+ OES NetWare Installation Guide 


Feedback 


We want to hear your comments and suggestions about this manual and the other documentation 
included with this product. Please use the User Comments feature at the bottom of each page of the 
online documentation. 


Documentation Conventions 


In this documentation, a greater-than symbol (>) is used to separate actions within a step and items 
within a cross-reference path. 


A trademark symbol (Y TM, etc.) denotes a Novell trademark. An asterisk (*) denotes a third-party 
trademark. 


When a single pathname can be written with a backslash for some platforms, or a forward slash for 
other platforms, the pathname is presented with a forward slash to reflect the Linux* convention. 
Users of platforms that require a backslash, such as NetWare, should use backslashes as required by 
the software. 
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Installing an OES NetWare Server 
in Your Lab 


IMPORTANT: When you create a new eDirectory™ tree that will contain both NetWare® and 
Linux” servers, you should start the Tree creation using a NetWare server first using the instructions 
in this guide. 


If you use a Linux server to create a new Tree, you need to install at least three OES Linux servers 
before adding a NetWare server to the newly created tree. Otherwise, you cannot install any Client 
or Server licenses, and any features that require either a NetWare Server license and/or NetWare 
Client Access license are inaccessible. 


Novell will be addressing this problem in a subsequent release of Open Enterprise Server. 


Use the instructions in this section to install Novell® Open Enterprise Server (OES) on the NetWare 
platform in your lab. 


This section describes the following tasks: 


+ Section 1.1, “Have the Required Lab Setup,” on page 9 

+ Section 1.2, “Create or Obtain Installation Media,” on page 10 
+ Section 1.3, “Install the Server Software,” on page 11 

* Section 1.4, "What's Next,” on page 14 


1.1 Have the Required Lab Setup 


For the tasks and exercises described in this guide, you need the following: 


Q A Server-Class Computer with the following: 


Component Minimum Recommended 
Processor Pentium” II or AMD* K7 450 Pentium III, Pentium III Xeon’, 
MHz Pentium 4, or Intel* Xeon 700 
MHz or higher 
RAM 512 MB 1 GB 
Display Adapter Super VGA VESA 1.2-compliant, high 
resolution 
CD Drive Supports the ElTorito 
Specification 
Hard Drive 20 GB 


(All data will be erased) 


Network Card Ethernet 100 Mbps 
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Component Minimum Recommended 


IP Addresses + IP Address on lab subnet 
* Subnet mask 


* Default gateway 


Mouse Not required USB or PS/2 


Q A Network Printer with an assigned static IP address and a connection to your lab network. 
Q A Workstation with 
* One ofthe following platforms installed: 

* Windows* XP 

* Windows 2000 

* Windows NT* 4 

or 
* Windows 95/98/ME 


+ Internet Explorer 6 SP1 or later installed. 


IMPORTANT: We recommend that you use Internet Explorer for all instructions in this 
guide. Some procedures, such as iPrint installation, only work in IE. Other procedures 
work in most cases, but might not appear or function as described. 


Additionally, browsing in iManager requires that pop-ups be disabled. 


* A print driver for the network printer installed on the workstation 


1.2 Create or Obtain Installation Media 


The Novell OES SP2 Planning and Implementation Guide contains full instructions for obtaining 
OES installation media. 


However, for the exercises in this guide you will need OES SP1 media, available on the Novell 
Support Web site (http://support.novell.com/tools/csp/csp oes.html). 


1.2.1 Prepare the Installation Media 


If you already have OES product CDs, skip to Section 1.3, “Install the Server Software,” on page 11. 


To install Novell Open Enterprise Server using image files from your reseller or the Novell 
Download Web site, you need the following: 
Q A CD-R device on your workstation 


Q CD-burning software, such as Roxio Easy CD Creator or Nero, which is capable of creating 
CDs from ISO image files 


Q Two 700 MB CD-R Media 
1 Create your OES for NetWare CDs using your CD-burning software. 
2 Label each CD as follows: 
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ISO Image Filename Label 


oes-netware-1.iso NetWare 6.5 SP4 CD 1 (Operating System) 


oes-netware-2-services.iso NetWare 6.5 SP4 CD 2 (Products) 


3 Continue with Section 1.3, “Install the Server Software,” on page 11. 


1.3 Install the Server Software 


Use the instructions in this section to install you OES NetWare server and services. 


1.3.1 Prerequisites 


Before installing Novell Open Enterprise Server (OES) for NetWare, you must complete the 
following tasks: 


Q Ensure that the server on which you are installing OES meets the requirements outlined in 
Section 1.1, “Have the Required Lab Setup,” on page 9. 


LJ Prepare the software for installation as explained in Section 1.2.1, “Prepare the Installation 
Media,” on page 10. 


1.3.2 Procedure 


WARNING: This procedure will erase any data currently on your servers hard drive. 


1 Using fdisk or a similar partition management utility, remove the existing partitions on your 
server’s hard drive. 


Prepare the BIOS on your server so that it boots from the CD-ROM drive first. 


Insert the NetWare 6.5 SP4 CD I (Operating System) CD into your server and reboot the 
machine. 


© N 


At the NetWare Installation screen, select a language for your installation, then press Enter. 
At the Regional Settings screen, press Enter. 


After reading each license agreement, press F10 to continue. 


NO on A 


At the Welcome to NetWare screen, leave the install type set to Default, press Tab to select 
Continue, then press Enter. 


8 At the NetWare Installation screen, press Enter to create a small DOS boot partition and a 4 GB 
SYS: volume and begin copying files for the installation. 


The file copy and hardware detection process can take approximately 10 to 15 minutes, 
depending on the read speed of your CD-ROM drive, bus speed, etc. 


IMPORTANT: The instructions that follow assume you have a mouse attached to the server. 
If this is not the case, you should use the Tab key to select the options indicated and then press 
Enter to continue rather than clicking the options indicated. 


9 Use the following table to navigate the screens listed in the left column: 
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Screen Name Action 


Product Installation Type 1. Click Next. 


Choose a Pattern 1. Click Next. 


Components 1. Select 
- Apache 2 Web Server and Tomcat 4 Serviet Container 
- iPrint 
- Novell iFolder Storage Services 
- Novell NetStorage 
- eGuide 
- Novell Virtual Office 
- Novell iManager 2.5 


2. Click Next. 


Summary 1. Click Copy Files. 


10 When prompted, insert the NetWare 6.5 SP4 CD 2 (Products) CD into the server’s CD-ROM 
drive. 


The installation process should continue automatically and copy the files required for the 
services you have selected. 


The file copy process can take approximately 7 to 10 minutes, depending on the read speed of 
your CD-ROM drive, bus speed, etc. 


11 Use the following table to navigate the screens listed in the left column. 


Screen Name Action 
Server Properties 1. Type LAB_NW for the server name and click Next. 
Protocols The instructions in this guide assume that you have a DNS 


server on your network that provides all information except the 
server IP address and hostname. If your network is configured 
differently, you might need to enter additional DNS information 
in this and the next screen. 


1. Check IP. 
The installation will auto-detect the information for your 
Lab subnet and populate as much IP address information 
as possible. 


2. Fill in the /P Address of the server. 


3. Verify the Subnet Mask, and Router (Gateway) address 
and modify if needed. 


4. Click Next. 


Domain Name Service 1. Specify the DNS Hostname associated with the IP address 
you just entered. 


2. Click Next 
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Screen Name 


Time Zone 


Action 


1. Click the correct time zone for your area. 


If you have already installed a server in the tree used in 
this guide, click Advanced and continue with Time 
Synchronization. 


If this is the first server in your tree, skip to eDirectory 
Installation Type. 

eDirectory uses the internal hardware clock on this server 
for time synchronization. (By the way, this is not 
recommended for a production environment.) 


Time Synchronization 

(not accessed if this is the first 
server in the tree used in this 
guide) 


1. Select NTPv3. 


2. In the Time Source 1 field, type the Primary IP address of 


the first server you installed, then click OK. 
Click Next. 


eDirectory Installation Type 


If you are installing this server first, select the Create a 
New eDirectory Tree option, then click Next. 
Skip to eDirectory Information. 


If you have already installed a server in the tree used in 
this guide, click Next. 


eDirectory Information 


. In the Tree Name field, type the following: 


EXAMPLE TREE 


In the Context for Server Object field, type the following: 
OU=SERVERS.OU=LAB.O=COMPANY 


3. Leave the Admin name as is (admin). 


4. Change the Admin Context to 


6. 


O=COMPANY 


Type a password for the Admin user in the Password and 
Retype Password fields. 


Click Next. 


eDirectory Summary 


1. 


Click Next. 


Licenses 


In this screen you install the evaluation license included with 
OES NetWare. This license expires 90 days after you install the 
server. For more information, see “Licensing” in the Novell OES 
SP2 Planning and Implementation Guide. 


1. 


Click the Browse icon to the right of the License Location 
field. 


In the Select a License dialog box, click the expansion dots 
to the left of NWPROD and then LICENSE. 


Click the 90368026.NLF folder that appears in the right 
frame. 


Click OK. 


5. Click Next. 
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Screen Name Action 


MLA License Certificate 1. Change the NDS Context to 

Context O=COMPANY 
This makes this license available to any additional OES 
NetWare servers you might choose to install in the tree. 


2. Click Next. 
Novell Modular Authentication 1. Click Next. 
Service 
iFolder Server Options 1. Click Next. 
NetStorage Install 1. In the first field, change the context portion of the screen 
(after the colon [:]) to 
O=COMPANY 


This actually sets the LDAP authentication search context 
and must be at a level higher than the users you will create 
later. 


2. Click Next. 


12 It takes a few minutes for the installation to configure your OES services. If you want to learn 
more about various OES services (most of which we have not installed), you can read the 
information screens as the configuration process runs. 


You can install more services later if you want to experiment further. 


13 At the Reset Your Server Now? prompt, click Yes, and remove the Products CD-ROM from the 
server’s drive. 


1.4 What’s Next 


To begin configuring your OES installation, continue with Chapter 2, “eDirectory and Identity 
Services,” on page 15. 
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eDirectory and Identity Services 


Novell® eDirectory™ is the central, key component of Novell Open Enterprise Server (OES) and 
provides the following: 
+ Centralized identity management 
+ The underlying infrastructure for managing your network servers and the services they provide 
+ Security access, both within the firewall and from the Web 
The installation scenario presented in this guide creates a new eDirectory tree named 


EXAMPLE_TREE that you can use for testing and learning about OES. As you work with the tree 
and the objects it contains, you will begin to better understand the role eDirectory plays. 


This section discusses the following: 


+ Section 2.1, “Using the eDirectory Information in This Guide,” on page 15 
+ Section 2.2, “An Introduction to eDirectory Planning,” on page 16 

* Section 2.3, “Access iManager,” on page 19 

+ Section 2.4, “Set Up Role-Based Services,” on page 20 


+ Section 2.5, “Create a Home Volume for User Home Directories,” on page 21 


Section 2.6, “Create a Context for Your Users and Groups,” on page 21 
+ Section 2.7, “Set Up Universal Password for Users,” on page 22 
+ Section 2.8, “Create Users (eDirectory User Objects),” on page 22 


+ Section 2.9, “Set the Universal Password for Each User,” on page 23 


Section 2.10, “A Note about Identity Manager Bundle Edition,” on page 24 
Section 2.11, “What’s Next,” on page 24 


2.1 Using the eDirectory Information in This 
Guide 


Before you install OES in a production environment, it is critical that you and your organization take 
time to plan and design your tree. 


However, the instructions in this guide require no planning on your part. In fact, some of the 
eDirectory objects used in this guide were created in Chapter 1, “Installing an OES NetWare Server 
in Your Lab,” on page 9. 


The information that follows introduces eDirectory. 


If you are already familiar with eDirectory and want to skip the planning introduction, we 
recommend that you 


1. View the eDirectory tree structure used in this guide (Figure 2-1 on page 17). 
2. Then skip to Section 2.3, “Access iManager,” on page 19. 
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2.2 An Introduction to eDirectory Planning 


If you want an efficient and intuitive eDirectory design, you and your organization will need to base 
it on 


+ The layout of your network. 
+ The structure of your organization. 
You and your team should carefully think through the issues and design considerations discussed in 


“Designing Your Novell eDirectory Network” in the Novell eDirectory 8.7.3 Administration Guide. 


2.2.1 Your Lab’s eDirectory Tree 


Figure 2-1 illustrates an eDirectory tree like the one you will use in the lab exercises found in this 
guide. It also illustrates and explains the basic elements you should consider when designing an 
eDirectory tree. 


NOTE: The IS Organizational Unit object is included for explanation purposes and is not created in 
this guide. 
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Figure 2-1 Your Labs eDirectory Tree 


EXAMPLE_TREE 


admin 


SERVERS 


"B 


This illustrates the basic elements you should 
consider when planning your tree. 


A The Tree object is the top container object in the 
tree. It usually contains an Organization object 
(specified in this guide O-COMPANY) that 
represents your company or organization. 


B The Organization object is normally the first 
(and often the only) container object under the 
Tree object. It is typically named after your 
organization. 


Small organizations keep object management 
simple by having all other objects, such as users, 
printers, and servers, directly under the 
Organization object. 


Organizations that are large enough to have 
departments or other organizational units usually 
decide to have their tree structure reflect their 
organizational structure. 


2.2.2 Your Current Lab Tree 


© 
o s" 


PRINTERS 


USERS 


"B 


As shown in this lab example, these organizations 
create Organizational Unit objects (specified in this 
guide as OU-LAB) that reflect their departments, 
divisions, geographical locations, etc., as is logical 
for their organization. 


Sometimes large organizations create multiple 
Organization objects below the Tree object to 
represent separate business units or subsidiaries. 


Every tree requires an Admin User object (specified 
in this guide as cn=admin). You log in as admin 

to create or import other User objects and to create 
the rest of your tree structure. 


D This example shows two Organizational Unit 


objects at the department level (LAB and IS). 


It also illustrates how Organizational Unit objects 
can be nested to provide as complex a hierarchy 
as is necessary to manage the organization. 


The eDirectory tree you have created by installing OES in your lab is illustrated and explained in 
Figure 2-2. The objects that are dimmed are for explanation purposes and do not exist in your 
current tree. When you finish with this guide, your tree will look more like Figure 2-1. 


NOTE: If this is the second server you are installing in the tree, the LAB LX server already exists. 
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Figure 2-2 Your Current Lab Tree 


EXAMPLE_TREE 


D" 


admin LAB IS 
IS 
à o—* G © 
SERVERS PRINTERS USERS SERVERS 


"d — "gg 


LAB NW (DNS hostname) 


S 


A The OES installation process requires that you 
specify names for the following objects: 


A1 ATree object 
A2 An Organization object 


B One of the first objects you specify during an 
initial installation is the Admin user (specified 
as cn=admin in this guide). 


During an initial installation, you should also 
specify admin for each parameter that calls 


IS NW (DNS hostname) 


g gd 


C The OES installation process can also create 
Organizational Unit objects to define a context 
for the OES Server object (LAB NW). 


D All other Organization Unit objects that you have 
planned for your tree must be created after the 
installation completes. 


E The exception to this is that subsequent 
installations can create additional contexts (for 
example, IS > Servers) to contain other OES 
servers (for example, IS NW) that you install into 


for a User object (administrator, proxy the tree. 
user, etc.) 


2.2.3 Expanding Your Lab Tree 


The instructions in this guide cover only the installation of a single OES server in the tree. 


If you were to decide to install additional servers in the tree, the processes you would follow could 
involve some preparatory tasks as illustrated in Figure 2-3. 
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Figure 2-3 An Expanded Tree 
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A During subsequent installations into the same tree, 
you can create new Organizational Unit objects to 
provide a context for other OES servers being 


PRINTERS 


ei 


USERS admin2 SERVERS 
[a L. 
8 Og [— 8 
| 
IS NW (DNS hostname) 


d S 


B If you want to specify other Admins users in the 
OES installation parameters, you can do this during 
the installation. 


installed. 


2.3 Access iManager 


Novell iManager is the main browser-based tool you will use to manage eDirectory and your OES 
services. 


IMPORTANT: The instructions in this guide assume you are using Internet Explorer 6 running on 
a Windows workstation. If you are using a different browser, some details will be different. 


To start iManager and prepare your browser for future sessions: 
1 Ina browser on a workstation, start iManager by entering the following URL: 
http://IP or DNS/nps 
where IP or DNS is the IP address or DNS name of your OES server. 


If your server has a DNS name on your network, the OES installation used that name when 
creating the SSL certificate for the server. We recommend that you use that name in all OES 
access URLs. 


2 (Conditional) If you do not receive a security alert (typically a pop-up message stating that the 
certificate is not trusted by your browser), skip to Section 2.4, “Set Up Role-Based Services," 
on page 20. 


If you receive a security alert, it is because the eDirectory certificate authority (CA) that issued 
the certificate for your OES server is not recognized by your browser as a valid CA. 


In this case, you have the following options: 


* Youcan click Yes to proceed each time you receive an alert. 
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If you prefer this option, skip to Section 2.4, “Set Up Role-Based Services," on page 20. 


You can avoid future messages when using the browser by importing the CA's certificate 
(also called the root certificate). 


If you want to do this, continue with Step 3. The example given is for Internet Explorer 6. 
You need to customize the steps described if you are using a different browser. 


You can purchase and install a server certificate from a third-party CA that the browser 
recognizes. 


This process is beyond the scope of this guide. For more information, see “Using 
Certificate Authorities from Third-Party Providers" in the Novell eDirectory 8.7.3 
Administration Guide. 


In the Security Alert pop-up dialog box, click View Certificate. 
Click Install Certificate > Next. 

Select the Place All Certificates in the Following Store option. 
Click Browse. 

Select Trusted Root Certification Authorities. 

Click OK > Next > Finish. 

Confirm that you want to add the certificate to the root store. 
Click OK > OK > Yes. 


Do not close iManager. Continue with the next section, Set Up Role-Based Services. 


2.4 Set Up Role-Based Services 


When iManager is installed in connection with OES, the administrative tasks available through the 
Roles and Tasks icon are available to all users until you run the configuration wizard. 
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If you haven't done so already, log in to iManager using the eDirectory Admin user account 
and password. 


Click the Configure icon [s] 

Select Role Based Services > RBS Configuration. 
Select the Configure iManager link in the Notice. 
Click the Browse icon [& next to the Container field. 
Click COMPANY, then click Next. 

Click the Browse icon [& next to the Scope field. 
Click EXAMPLE TREE. 

Click Start. 


When the installation process completes, click Close. 


The eDirectory Admin user is now the only user configured to perform the administrative tasks 
available through the Roles and Tasks icon. 


Do not close iManager. Continue with the next section, Create a Home Volume for User Home 
Directories. 
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2.5 Create a Home Volume for User Home 
Directories 


After installing your server, you need to set up an area on the hard drive for user home directories 
and other data directories as needed. 


In this procedure you create a storage pool named DATA and a volume named HOME in the DATA 
pool. 


1 Log into iManager using the Admin username (admin) and password created during the 
installation. 


2 In iManager click Storage > Pools. 
Click the Browse icon M next to the Server field. 


C 


Browsing in iManager utilizes pop-ups. You might have to disable pop-up blockers to use 
iManager with your browser. 


4 Click the down-arrows £ next to COMPANY > LAB > SERVERS. 
5 Click the LAB NW server object. 
6 Click New. 
7 Inthe Name field, type DATA, then click Next. 
8 In the Used Size (MB) field, enter up to the Megabyte amount shown under Free Size (MB). 
9 Select the check box for the device on which you are creating the pool. 
0 Click Finish. 

11 In the Roles and Tasks under Storage, click Volumes. 

12 Click New. 

13 In the New Volume Name field, type HOME, then click Next. 

14 Select the check box next to the DATA Pool Name, then click Next. 

15 Click Finish. 

The HOME volume appears in the list of volumes. 


Do not close iManager. Continue with the next section, Create a Context for Your Users and 
Groups. 


2.6 Create a Context for Your Users and Groups 


All OES products require that you create User objects to represent the users on your system. 


If you reviewed Section 2.2, *An Introduction to eDirectory Planning," on page 16, you might have 
noticed an Organizational Unit (OU) object in Figure 2-2 and Figure 2-3 named Users. It is usually 
helpful to have at least one OU object to contain user-related objects, such as User objects and 
Group objects. 


Create an OU object named Users in the lab Organizational Unit object by completing the following 
steps: 

1 In iManager, click the View Objects icon [A 

2 In the left pane, click the down-arrow Z next to the COMPANY object a, 

3 Click LAB, then select Create Object from the drop-down list. 
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4 From the Available Object Classes list, select Organizational Unit, then click OK. 
5 Inthe Organizational Unit name field, type USERS. 
6 Click OK twice. 


Do not close iManager. Continue with the next section, Set Up Universal Password for Users. 


2.7 Set Up Universal Password for Users 


On networks where administrators plan to provide native protocol access from Linux, Macintosh, or 
Windows workstations to OES file services, the simplest method is to establish a Universal 
Password policy for all eDirectory users. This ensures that passwords are always synchronized. 


For Samba (Windows access) users on OES Linux servers, the installation creates a Universal 
Password (UP) policy if one doesn’t already exist that meets Samba requirements. 


For Native File Access Protocol (NFAP) users on OES NetWare servers, a UP policy is not 
automatically created. 


To ensure a consistent lab experience, you will create a UP policy, assuming this is the first server in 
the tree, and associate it with the USERS container created in Section 2.6, “Create a Context for 
Your Users and Groups,” on page 21. GJ 


1 In iManager, click the Roles and Tasks icon g 

Click Passwords > Password Policies. 

Click New. 

Under Policy Name, type UP_Policy_1, then click Next. 
Deselect Enable the Advanced Password Rules. 

Click View Options. 
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Leave the default options enabled and also check the Allow Admins to Retrieve Passwords 
option (under Universal Password Retrieval). 


8 Click Next twice. 

9 Click the Browse icon Ñ next to the Assign To: field. 
10 Click the Up-arrow ©. 
11 Click the USERS Organization Unit object, then click OK. 
12 Click Next > Finish > Close. 


Do not close iManager. Continue with the next section, Create Users (eDirectory User Objects). 


2.8 Create Users (eDirectory User Objects) 


For the lab exercises, you will need to create the users shown in Table 2-1. 
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Table 2-1 Users to Create 


Field Name User 1 User 2 User 3 Other Users 


Username: ajohns bjohnson  cmartin Some OES file services can be accessed from 


Windows without requiring a username and password 
if the eDirectory usernames and passwords match 
those used to log in to Windows. 


To prepare for testing these file services, create 
eDirectory users that match the Windows users you 
will use to log in to the Windows workstations in the 
lab. 


Alternatively, you can create Windows users that 
match the three eDirectory usernames listed in this 
table. 


Firstname: Arnold Bobby Chris 


Last name: Johns Johnson Martin 
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In iManager, click the View Objects icon [A 

Click the down-arrow £^ next to LAB. 

Click USERS and select Create User from the drop-down list. 

In the Username field, type a Username shown in Table 2-1. 

Type the first name (optional) and last name (required) for ajohns as shown in Table 2-1. 
Type the same password in both the Password and Retype Password fields. 


If the user you are creating is to match a Windows user as described in Table 2-1, be sure the 
password matches the password in Windows. 


Do not select Set Simple Password. 


8 Select Create Home Directory. 
9 Click the Browse icon M next to the Volume field. 


11 


12 
13 


Browse to the HOME volume by clicking the up-arrow t, clicking the down-arrow £ next to 
SERVERS, and clicking the LAB NW HOME volume object. 


(Optional) If desired, type a Title and other information you want to appear in eGuide search 
results. 


Click OK twice. 


Repeat this process from Step 3 for the other users listed in Table 2-1 and for any additional 
User objects you want to create. 


Do not close iManager. Continue with the next section, Set the Universal Password for Each User. 


2.9 Set the Universal Password for Each User 


To use Universal Password, it must be set. 


1 
2 


In iManager, click the Roles and Tasks icon GI 


Click Passwords > Set Universal Password. 
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3 Click the Browse icon I next to the Set Password For field. 


4 Browse to the USERS container by clicking the up-arrow t and then clicking the down-arrow 
F next to USERS. 


5 Select a user object to set the Universal Password for. 

6 Click OK. 

7 Type the user's password in the New Password and Retype Password fields, then click OK. 
You can use the same password as originally specified for the user. 


8 Set a Universal Password for each user object by going to Step 2 and repeating the process. 


2.10 A Note about Identity Manager Bundle 
Edition 
If your organization has more than one directory storing user information, you should consider 


implementing Novell Identity Manager Bundle Edition included with Novell Open Enterprise 
Server. 


The Identity Manager Bundle Edition provides licensed synchronization of information (including 
passwords) held in NT Domains, Active Directory Domains, and eDirectory trees. 


Not only can you import User objects into eDirectory rather than creating them as you have in this 
section, but you can use Identity Manager to keep all the user data (including passwords) that are 
stored in your different databases synchronized with each other. 


When data from one system changes, Identity Manager detects and propagates these changes to 
other connected systems based on the business policies you define. 


For more information, see “Using the Identity Manager Bundle Edition" in the Novell OES SP2 
Planning and Implementation Guide. 


2.11 What's Next 


When you have created all the User objects for your lab, continue with Chapter 3, “Native File 
Access Protocol Support," on page 25. 
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Native File Access Protocol 
Support 


NetWare® OES includes support for the native file access methods on Linux, Macintosh, UNIX, and 
Windows workstations. 


This section discusses the following: 


+ Section 3.1, “Overview,” on page 25 
+ Section 3.2, “Enabling NFAP Services on the LAB NW Server,” on page 26 
* Section 3.3, "What's Next,” on page 26 


3.1 Overview 


Figure 3-1 illustrates the Native File Access Protocol (NFAP) support services that are enabled by 
installing OES NetWare. A more detailed overview of NFAP file services on OES is found in 
“Native File Access Protocols" in the Novell OES SP2 Planning and Implementation Guide. 


Figure 3-1 Native File Access Support on OES NetWare 
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3.2 Enabling NFAP Services on the LAB_NW 
Server 


iManager has created home directories on the HOME volume on LAB_NW for the users you 
created in Section 2.8, “Create Users (eDirectory User Objects),” on page 22. By default, all 
volumes on the NetWare server are available for CIFS and AFP access. 


This guide has you access the server using native Windows functionality. 


If you want to also experiment with Linux, UNIX, or Macintosh workstations, refer to the 
information in the “Native File Access Protocols Implementation and Maintenance” in the Novell 
OES SP2 Planning and Implementation Guide after completing all the sections in this guide. 


3.3 What’s Next 


If you want to test Windows file services at this point, go to Section 9.1, “Using Windows File 
Services,” on page 43. 


Otherwise, continue with Chapter 4, “Novell iFolder,” on page 27. 
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Novell iFolder 


As a key file service component of Novell® Open Enterprise Server (OES), Novell iFolder® 
provides a Web- and network-based repository (iFolder server) that stores master copies of locally 
accessible files. 


This section discusses the following: 


* Section 4.1, “Overview,” on page 27 

+ Section 4.2, “Setting Up User Search Contexts,” on page 28 
+ Section 4.3, “Enabling iFolder Users,” on page 29 

* Section 4.4, "What's Next,” on page 29 


4.1 Overview 


Figure 4-1 illustrates the file services that are enabled by completing the steps in the sections that 
follow. 


A more detailed overview of iFolder file services on OES is found in *Novell iFolder 2.1x" in the 
Novell OES SP2 Planning and Implementation Guide. 
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Figure 4-1 iFolder File Services on OES 
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4.2 Setting Up User Search Contexts 


1 Start the iFolder Management tool by entering the following URL in a browser Address field: 
https://IP or DNS/iFolderServer/Admin 
where IP or DNS is the IP address or DNS name of your OES server. 


If your server has a DNS name on your network, the OES installation used that name when 
creating the SSL certificate for the server. To avoid certificate mismatch messages, use the 
DNS name in all access URLs. 


Click the Global Settings icon |] 

Log in as admin. 

In the left pane, click User LDAPs. 

In the right pane, click the ifolder ldap01 link. 

In the Contexts to Search section, select the Search Subcontexts option. 
Click Update. 
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Do not close the iFolder Management tool. Continue with the next section, Enabling iFolder Users. 
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4.3 Enabling iFolder Users 


Do the following: 
1 Continuing from Step 7 in the previous section, click the User Management icon E 
2 In the left pane, click Advanced Search. 
3 In the right pane, click Search. 
4 


Check the checkboxes next to ajohns, bjohnson, and cmartin, then click Enable Checked Users 
as iFolder Users. 


5 When asked to confirm the action, click OK. 
Notice that the users are enabled for iFolder access &. 


6 (Optional) Use the options in the User Management dialog to enable additional users for 
iFolder. 


4.4 What’s Next 


If you want to test iFolder file services at this point, go to Section 9.2, “Using iFolder 2.x,” on 
page 44. 


Otherwise, continue with Chapter 5, “Virtual Office,” on page 31. 
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Virtual Office 


As a key productivity component of Novell® Open Enterprise Server (OES), Novell Virtual Office 


provides Web access to OES services. 


5.1 Overview 


Figure 5-1 illustrates the services that are available by default on the lab installation of OES outlined 


in this guide. 


A more detailed overview of Virtual Office on OES is found in “Overview of Virtual Office” in the 


Novell OES SP2 Planning and Implementation Guide. 


Figure 5-1 Virtual Office Overview 
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5.2 What’s Next 
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When you completed the installation instructions in this guide, your Virtual Office installation was 


complete. Virtual Office requires no further configuration. 


If you want to test Virtual Office at this point, go to Section 9.3, “Using Virtual Office,” on page 45. 


Otherwise, continue with Chapter 6, “iPrint,” on page 33. 
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iPrint 


As the print services component of Novell® Open Enterprise Server (OES), Novell iPrint provides a 
powerful and easy-to-implement printing solution that lets your network users print from any Linux, 
Macintosh, or Windows workstation to any network printer. 


This section discusses the following: 


* Section 6.1, “Overview,” on page 33 


Section 6.2, “Creating an eDirectory Context for Printers,” on page 34 


Section 6.3, “Creating a Print Driver Store (Broker),” on page 34 


Section 6.4, “Adding Printer Drivers to the Driver Store from the Windows Platforms,” on 
page 35 


Section 6.5, “Creating and Starting Up a Print Manager Object,” on page 36 


Section 6.6, “Creating iPrint Printer Objects,” on page 36 
Section 6.7, "What's Next,” on page 37 


6.1 Overview 


Figure 6-1 on page 34 illustrates the printing services that are enabled by completing the steps in the 
sections that follow. 


A more detailed overview of iPrint services on OES is found in “iPrint Functionality” in the Novell 
OES SP2 Planning and Implementation Guide. 
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Figure 6-1 iPrint on OES 
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System administrators often create one or more container objects just for network printers. 


Obviously, this is an optional organizational preference issue. Printers can be placed wherever 


makes sense for your organization. 
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Start iManager by entering the following URL in a browser Address field: 
http://IP_or_DNS/nps 

where /P_or_DNS is the IP address or DNS name of your OES server. 

Log in to iManager as admin. 

Click the View Objects icon “1. 

In the left pane, click the down-arrow Z next to the COMPANY Organization object. 
Click LAB, then select Create Object from the drop-down list. 

From the Available Object Classes list, select Organizational Unit, then click OK. 
In the Organizational Unit Name field, type PRINTERS. 

Click OK twice. 


6.3 Creating a Print Driver Store (Broker) 


1 
2 


« 
In iManager, click the Roles and Tasks icon “ : 
Click iPrint > Create Broker. 
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In the Broker Name field, type Print_Drivers. 

Click the Browse icon M next to the Container Name field. 

Click the down-arrow Z next to LAB, then click the PRINTERS Organizational Unit object. 
Click the Browse icon SS next to the Resource Management Service (RMS) Volume Name field. 


Click the down-arrow Z next to LAB, click the down-arrow # next to SERVERS, then click 
LAB_NW_SYS. 


8 Click OK twice. 
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6.4 Adding Printer Drivers to the Driver Store 
from the Windows Platforms 


You can load printer drivers to the Driver Store using driver files. However, because most Windows 
workstations have an extensive list of printer drivers available on the system. the simplest way to 
add drivers is to load them directly from a workstation. 


In other words, you can load the Windows XP drivers from a Windows XP workstation, Windows 
2000 drivers from a Windows 2000 workstation, etc. 


Complete the following steps once for each of the following Windows platforms that you have in 
your lab: 


* Windows XP 

* Windows 2000 

* Windows NT 4 

* Windows 95/98/ME 


IMPORTANT: The following procedures requires Internet Explorer 5 or later. (Internet Explorer 6 
SPI is the supported browser for managing OES from Windows workstations.) You cannot 
complete these steps with another browser. 


1 Open a browser on the workstation and enter the following URL in the Address field: 
http://IP or DNS/ipp 

where IP or DNS is the IP address or DNS name of your OES server. 

On the grey banner line, click the /nstall iPrint Client link. 

Save the file to a location on your hard drive that you will remember in the next step. 
Run the nipp.exe file in the directory where you just saved it. 

Read the license agreement, then click Next. 

After the client installs, click Finish. 

Close the browser. 

If it is not already running, start iManager (http://server/nps) and log in as admin. 
Click iPrint > Manage Broker. 

Click the Browse icon M next to the NDPS Broker Name field. 


Browse to the PRINTERS container (COMPANY > LAB > PRINTERS), then click the 
Print Drivers object. 
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12 Click OK. 

13 Under Broker State: Down, click Startup. 

14 Click the Resource Management Service tab. 

15 Click the link for your workstation type (Windows XP, Windows 2000, etc.). 
16 Click Add from System. 


17 Inthe Add Resource dialog box, select the correct driver for the printer you plan to use for the 
lab test. 


18 Click OK. 


19 (Optional) To test multiple printers, repeat Step 16 through Step 18 for each printer you want to 
test. 


20 When finished, click Apply > OK. 


Do not close iManager. Continue with the next section, Creating and Starting Up a Print Manager 
Object. 


6.5 Creating and Starting Up a Print Manager 
Object 


The iPrint Manager is represented by and managed through a Print Manager object in eDirectory™. 
It is a daemon that runs on the OES server, and it must be running when you create Print objects. 
After printing is set up, the iPrint manager receives print job requests and forwards them to printers 
when the printers are ready. 


1 Continuing from Step 20 in the previous section, click iPrint > Create Print Manager. 
2 Inthe Manager Name field, type the following: 

iPrint Manager 

Click the Browse icon & next to the Container Name field. 

Click the down-arrow Z next to LAB, then click PRINTERS. 

Click the Browse icon El next to the Database Volume field. 


Click the down-arrow Z next to LAB, click the down-arrow # next to SERVERS, then click 
LAB NW SYS. 


Click OK twice. 
Click iPrint > Manage Print Manager. 
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9 Browse to and select the iPrint_Manager object, then click OK. 
10 Click Startup. 


Do not close iManager. Continue with the next section, Creating iPrint Printer Objects. 


6.6 Creating iPrint Printer Objects 


You can create iPrint Printer objects for all your printers that have drivers in the Driver Store and an 
IP address or DNS name. 
1 Continuing from the previous section, click iPrint > Create Printer. 


2 Inthe Printer Name field, type a name for your printer. 
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Click the Browse icon [M next to the Container Name field. 
Click the Down-arrow £^ next to LAB, then click PRINTERS. 
Click the Browse icon Z next to the Manager Name field. 


Click the down-arrow Z next to LAB, click the down-arrow £ next to PRINTERS, then click 
iPrint_Manager. 


7 Click Next. 

8 Type the DNS name or IP address of the printer in the field indicated. 

9 Click Next. 
10 Select the appropriate drivers for each Windows platform you are testing. 
11 Click Next. 
12 Click OK. 


6.7 What’s Next 


If you want to test iPrint at this point, go to Section 9.4, “Using iPrint,” on page 45. 


o0 » o 


Otherwise, continue with Chapter 7, “NetStorage,” on page 39. 
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NetStorage 


As a versatile file services component of Novell® Open Enterprise Server (OES), Novell NetStorage 
provides the file services behind the Files button in Virtual Office and is installed as part of Virtual 
Office. However, NetStorage can also be accessed directly rather than through Virtual Office. 


This section discusses the following: 


* Section 7.1, “Overview,” on page 39 
* Section 7.2, "Configuring LDAP for NetStorage Access," on page 40 
* Section 7.3, "What's Next," on page 40 


T.1 Overview 


Figure 7-1 illustrates the NetStorage file services that are enabled by default. 


A more detailed overview of NetStorage file services on OES is found in “NetStorage” in the Novell 
OES SP2 Planning and Implementation Guide. 


Figure 7-1 NetStorage on OES 
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In OES NetWare®, the default NetStorage installation provides access to two folders: 
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+ A shared folder on the local file system that contains a ReadMe. html file with instructions 
for creating NetStorage Storage Location objects. 


+ An iFolder Storage Provider link to the Novell iFolder? data store, if iFolder is installed on the 
server (as in this lab guide). 


In OES NetWare, access to iFolder through NetStorage is automatically configured. 


7.2 Configuring LDAP for NetStorage Access 


Virtual Office is the primary access point for NetStorage in these lab exercises. The users who log 
into Virtual Office can automatically access NetStorage using LDAP authentication, providing the 
LDAP search can find their user objects. 


When you installed NetStorage, you specified the COMPANY container as the LDAP search 
context. Because the user objects you have created are not direct children of COMPANY, you must 
first configure the LDAP search so it will find the user objects. The simplest way to do this is to 
disable TLS binds with passwords as explained in this section. 


1 Start iManager by entering the following URL in a browser Address field: 
http://IP or DNS/nps 

where IP or DNS is the IP address or DNS name of your OES server. 
Log in to iManager as admin. 

Click LDAP > LDAP Options. 

Click the LDAP Group - LAB NW.Servers.LAB. COMPANY link. 

Deselect the Require TLS for Simple Binds with Password option. 

Click Apply > OK. 


7.3 What’s Next 


If you have already tested iFolder and you want to test NetStorage file services at this point, go to 
Section 9.5, “Using NetStorage,” on page 46. 
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Otherwise, continue with Chapter 8, “eGuide,” on page 41. 
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eGuide 


Novell® eGuide provides user access to information stored in eDirectory™ and other LDAP- 
compliant data sources. eGuide can provide your users with “white pages” access to user 
information and much more—basically, any information you choose to store in eDirectory objects 


can be exposed to users through eGuide. 


8.1 Overview 


Figure 8-1 on page 41 illustrates that by default eGuide on OES lets users view their own 
information and see limited information about other users on the system. 


A more detailed overview of eGuide on OES is found in “White Pages (eGuide)” in the Novell OES 
SP2 Planning and Implementation Guide. 


Figure 8-1 eGuide on OES 
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8.2 What’s Next 


eGuide 


OES Server 


If you want to test eGuide at this point, go to Section 9.6, “Using eGuide,” on page 46. 


Otherwise, continue with Chapter 9, “Getting Acquainted with OES,” on page 43. 
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Getting Acquainted with OES 


After you have installed Novell® Open Enterprise Server (OES) and completed the configuration 
instructions located in the preceding sections, your OES server is ready for lab use. 


The instructions and information in this section acquaint you with the basic services available in 
OES. More detailed service overviews are available in the Novell OES SP2 Planning and 
Implementation Guide. For comprehensive documentation for each service, see the administration 
guides and other documentation listed on the OES documentation Web site (http://www.novell.com/ 
documentation/oes). 


This section discusses the following: 


+ Section 9.1, “Using Windows File Services,” on page 43 
+ Section 9.2, “Using iFolder 2.x,” on page 44 

+ Section 9.3, “Using Virtual Office,” on page 45 

* Section 9.4, “Using iPrint,” on page 45 


Section 9.5, “Using NetStorage,” on page 46 


* Section 9.6, “Using eGuide,” on page 46 
* Section 9.7, "What's Next,” on page 46 


9.1 Using Windows File Services 


NOTE: To perform the steps in this section, you must have completed all the instructions in Chapter 
3, “Native File Access Protocol Support,” on page 25. 


1 In Windows Explorer, click Tools > Map Network Drive. 
2 Select an unused drive letter. 
3 In the Folder field, type the following: 
\\ IP_or_DNS\ HOME 
where IP or DNS is the IP address or full DNS name of the OES server. 
4 Click the Connect Using a Different Username link. 


5 Type ajohns in the User Name field and the password you created for ajohns in the Password 
field. 


6 Click OK > Finish. 


Notice that the Directory and File Trustee Access rights created for ajohns allow you to see 
only the ajohns home directory folder. 


7 Drag some files from Windows Explorer or the desktop into ajohn’s home folder. 


By default, this drive mapping is available each time the user logs in to the Windows workstation 
unless you uncheck the Reconnect at Logon option when setting up the drive mapping. 
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9.2 Using iFolder 2.x 


NOTE: To perform the steps in this section, you must have completed all the instructions in Chapter 
4, “Novell iFolder,” on page 27. 


9.2.1 Access User Accounts Using the iFolder 2.x Client 


The steps in this section are required to activate an important feature of Novell iFolder®: encryption 
of user data in the iFolder data store. 


Data encryption is automatically set up when users access their accounts for the first time through 
the iFolder client. 


On the other hand, if users access their files for the first time through NetStorage or Virtual Office, 
they are not prompted to set a passphrase and their data is not encrypted in the data store. 
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From a browser on a Windows workstation, access the iFolder server using the following URL: 
http://IP or DNS/iFolder 

where IP or DNS is the IP address or DNS name of your OES server. 

In the left pane, click the Download link. 

In the Download dialog box, click Open. 

Click Next twice. 

Read the license agreement, then close the license window. 

Click Yes to accept the license terms. 

(Optional) Specify an alternate location for the program files. 

Click Next > Finish. 

(Optional) Read the iFolder Readme file, then close the Readme window. 
Click Finish to restart the computer. 

After the computer restarts, read the information about using iFolder. 
Click Continue. 


Log in to iFolder using the username and password of the iFolder user who will use the 
workstation. 


Accept the default iFolder location on the workstation or use the Browse button to specify an 
alternate location. 


Click OK. 
Leave the Encrypt Files option checked, then click OK. 


Type a passphrase, a confirmation passphrase, and a hint (optional) in the fields provided, then 
click OK. 


Click OK to enable passphrase recovery. 


Continue with the next section, “Observing File Synchronization.” 


44 Lab Guide for OES NetWare 


9.2.2 Observing File Synchronization 


To understand more about how iFolder works, it is helpful to observe the file synchronization 
processes in action. 


1 Open the (Folder shortcut on your desktop. 

Double-click the iFolder icon in your system tray, then click View Activity. 
Create one or two test files on your desktop. 

Drag the files to the iFolder Home folder. 


In the View Activity window, observe that the files are copied to the iFolder server. 
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Delete a file or drag it back to the desktop and observe how the action is synchronized with the 
server. 


Keep one or two files in the iFolder Home folder and continue with the next section, “Using Virtual 
Office.” 


9.3 Using Virtual Office 


1 Using a Java-enabled Web browser, enter the following URL in the Address field: 
http://IP_or_DNS/vo 
where IP or DNS is the IP address or DNS name of your OES server. 

2 Log in with the username you used in the “Using iFolder 2.x” section. 

3 Inthe eGuide section, type john in the Last Name field and then click Search. 
Both Arnold Johns and Bobby Johnson are listed. 

4 Move the mouse over each of the icons at the top of the page and notice the label for each icon. 


The following sections can be accessed using their own URLs, but for demonstration purposes we 
will have you access them through Virtual Office. 


9.4 Using iPrint 


NOTE: To perform the steps in this section, you must have completed all the instructions in Chapter 
6, “Print,” on page 33. 


1 In Virtual Office, click the iPrint icon =] 
iPrint is installed as part of Virtual Office. 


2 (Optional) If you have not already installed the iPrint client on this workstation, click the 
Install iPrint Client link and install the client. 


3 After the client is installed, click the link to install a printer you created in Section 6.6, 
“Creating iPrint Printer Objects,” on page 36. 


Answer the prompts to install the printer on the workstation. 

Access the Printers property page by clicking Start > Settings > Printers. 
Right-click the printer, then click Properties. 

Click Print Test Page. 
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9.5 Using NetStorage 


NOTE: To perform the steps in this section, you must have completed all the instructions in Chapter 
4, “Novell iFolder,” on page 27 and in Section 9.2, “Using iFolder 2.x,” on page 44. 


1 In Virtual Office, click the Files icon -. 
2 Inthe left pane, click the iFolder folder. 
3 Enter and confirm the passphrase. 
4 Click Set Passphrase. 
5 Click the iFolder folder again. 
Notice that the files you previously worked with in the iFolder section appear in the right pane. 


If you were to change folder contents as you did in Section 9.2.2, “Observing File 
Synchronization," on page 45, you would see the same coordination through the iFolder client 
as you did then. All changes to the iFolder data on the server are reflected to locally stored 
directories and files through the client. 


6 To read more information about using NetStorage to access other file storage systems, click the 
Shared folder and double-click the Read Me .html1 file. 


For more information on using NetStorage, see the OES NetStorage Administration Guide for 
NetWare. 


9.6 Using eGuide 


1 In Virtual Office, click the eGuide icon C4 
2 Enter various search strings to display the eDirectory™ users you have created. 


Notice that when you select the currently logged-in user, an Edit Information option is 
included. 


Although this option appears, if users try to edit their information, the changes fail to save. To 
enable this feature, you must assign Role-Based Services or ACLs. For more information, see 
the Novell eGuide 2.1.2 Administration Guide. 


9.7 What’s Next 


After you complete the exercises in this guide, we recommend you do the following: 
1. Think about the needs of your organization and how the various OES product components can 
help you address those needs. 
2. Go back to the various components and work with them considering the needs you identified. 
3. Begin planning your organization’s eDirectory tree and the rollout of OES services to your 


organization. 


As you plan for, work with, and install OES for NetWare®, you should consult the other OES 
product documentation: 
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Title Contents 


OES NetWare Installation Guide Detailed overviews of all components, planning 
information and instructions, and links to configuration 
and maintenance information in the administration 
guides associated with each OES product component. 


Novell OES SP2 Planning and Comprehensive installation instructions for all OES 
Implementation Guide components. 
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Documentation Updates 


This section summarizes the changes made to this manual since the initial release of Novell® Open 
Enterprise Server. 


A.1 December 23, 2005 


Chapter or Section Changed Summary of Changes 


Various. Included notes that Virtual Office requires OES SP1 and 
provided information on where to get the software. 


A.2 November 1, 2005 


Chapter or Section Changed Summary of Changes 


Entire guide. Page design reformatted to comply with revised Novell 
documentation standards. 


A.3 October 3, 2005 


Chapter or Section Changed Summary of Changes 

Section 1.2.1, “Prepare the Installation Updated the names of the NetWare® CDs. Also changed 
Media,” on page 10 references to them in other sections. 

Various Made various changes based on documentation testing. No 


changes were substantive. 
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